Update licensing to MPL-2.0 + Palimpsest

Jonathan D.A. Jewell · Jonathan D.A. Jewell · commit 20bc19958878 · 2026-01-03T03:34:24.000Z
- LICENSE: MPL-2.0 with Palimpsest notice
- Added PALIMPSEST.adoc philosophy document
- Updated README badges
- Updated workflow SPDX headers to MPL-2.0

Legal license: MPL-2.0
Philosophical framework: Palimpsest (not yet legally binding)
Future: Palimpsest v0.5+ will integrate MPL-2.0

🤖 Generated with Claude Code
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # CodeQL disabled - no scannable source code detected
 name: CodeQL Security Analysis
 
diff --git a/.github/workflows/elixir.yml b/.github/workflows/elixir.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 # This workflow uses actions that are not certified by GitHub.
 # They are provided by a third-party and are governed by
 # separate terms of service, privacy policy, and support
diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 # This workflow uses actions that are not certified by GitHub.
 # They are provided by a third-party and are governed by
 # separate terms of service, privacy policy, and support
diff --git a/.github/workflows/guix-nix-policy.yml b/.github/workflows/guix-nix-policy.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 name: Guix/Nix Package Policy
 permissions: read-all
 on: [push, pull_request]
diff --git a/.github/workflows/jekyll-gh-pages.yml b/.github/workflows/jekyll-gh-pages.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 # Sample workflow for building and deploying a Jekyll site to GitHub Pages
 name: Deploy Jekyll with GitHub Pages dependencies preinstalled
 
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # SPDX-FileCopyrightText: 2025 Jonathan D.A. Jewell
 name: Mirror to Git Forges
 
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 name: Code Quality
 permissions: read-all
 on: [push, pull_request]
diff --git a/.github/workflows/rsr-antipattern.yml b/.github/workflows/rsr-antipattern.yml
@@ -1,5 +1,5 @@
 # RSR Anti-Pattern CI Check
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 #
 # Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm
 # Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme
diff --git a/.github/workflows/scorecard-enforcer.yml b/.github/workflows/scorecard-enforcer.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Prevention workflow - runs OpenSSF Scorecard and fails on low scores
 name: OpenSSF Scorecard Enforcer
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 name: OSSF Scorecard
 on:
   push:
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # Prevention workflow - scans for hardcoded secrets before they reach main
 name: Secret Scanner
 
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 name: Security Policy
 permissions: read-all
 on: [push, pull_request]
diff --git a/.github/workflows/ts-blocker.yml b/.github/workflows/ts-blocker.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 name: TypeScript/JavaScript Blocker
 permissions: read-all
 on: [push, pull_request]
diff --git a/.github/workflows/wellknown-enforcement.yml b/.github/workflows/wellknown-enforcement.yml
@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: MPL-2.0
 name: Well-Known Standards (RFC 9116 + RSR)
 permissions: read-all
 on:
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-License-Identifier: MPL-2.0
 # workflow-linter.yml - Validates GitHub workflows against RSR security standards
 # This workflow can be copied to other repos for consistent enforcement
 name: Workflow Security Linter
diff --git a/LICENSE b/LICENSE
diff --git a/PALIMPSEST.adoc b/PALIMPSEST.adoc
diff --git a/README.adoc b/README.adoc

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: AGPL-3.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`2`	`2`	`# CodeQL disabled - no scannable source code detected`
`3`	`3`	`name: CodeQL Security Analysis`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`1`	`2`	`# This workflow uses actions that are not certified by GitHub.`
`2`	`3`	`# They are provided by a third-party and are governed by`
`3`	`4`	`# separate terms of service, privacy policy, and support`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`1`	`2`	`name: Guix/Nix Package Policy`
`2`	`3`	`permissions: read-all`
`3`	`4`	`on: [push, pull_request]`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`1`	`2`	`# Sample workflow for building and deploying a Jekyll site to GitHub Pages`
`2`	`3`	`name: Deploy Jekyll with GitHub Pages dependencies preinstalled`
`3`	`4`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`1`	`2`	`name: Code Quality`
`2`	`3`	`permissions: read-all`
`3`	`4`	`on: [push, pull_request]`
Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`# RSR Anti-Pattern CI Check`
`2`		`-# SPDX-License-Identifier: AGPL-3.0-or-later`
	`2`	`+# SPDX-License-Identifier: MPL-2.0`
`3`	`3`	`#`
`4`	`4`	`# Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm`
`5`	`5`	`# Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# SPDX-License-Identifier: MPL-2.0`
`1`	`2`	`name: OSSF Scorecard`
`2`	`3`	`on:`
`3`	`4`	`push:`